{"attribution":"This product uses data from the NVD API but is not endorsed or certified by the NVD.","cve":{"id":"CVE-2026-54437","sourceIdentifier":"secure@blackberry.com","published":"2026-11-10T19:21:16.647","lastModified":"2026-11-10T19:21:16.647","vulnStatus":"Received","cveTags":[],"descriptions":[{"lang":"en","value":"Improper Input Validation in the io-char library's\nDCMD_CHR_TCINJECTC devctl() handler could allow an attacker with local access\nto cause data tampering in the memory input buffer of the Character I/O device\ndriver."}],"affected":[{"source":"secure@blackberry.com","affectedData":[{"vendor":"BlackBerry Ltd","product":"QNX Software Development Platform","defaultStatus":"unaffected","versions":[{"version":"cpe:2.3:a:blackberry:qnx_software_development_platform:8.0:*:*:*:*:*:*:*","versionType":"cpe","status":"affected"},{"version":"cpe:2.3:a:blackberry:qnx_software_development_platform:7.1:*:*:*:*:*:*:*","versionType":"cpe","status":"affected"},{"version":"cpe:2.3:a:blackberry:qnx_software_development_platform:7.0:*:*:*:*:*:*:*","versionType":"cpe","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"secure@blackberry.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":6.2,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.5,"impactScore":3.6}]},"weaknesses":[{"source":"secure@blackberry.com","type":"Secondary","description":[{"lang":"en","value":"CWE-1287"}]}],"references":[{"url":"https://support.blackberry.com/pkb/s/article/141341","source":"secure@blackberry.com"}]}}